Red Hat Trusted Profile Analyzer: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-45296

  path-to-regexp outputs backtracking regular expressions

  path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, …

  pillarjs path-to-regexp thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Azure Linux Wolfi npm
  Sep 9, 2024
• High 7.5
  CVE-2024-45590 Public exploit

  body-parser vulnerable to denial of service when url encoding is enabled

  body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denia…

  expressjs body-parser kubeflow-pipelines-apiserver kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  Sep 10, 2024

Revision history

1. 2025-11-18 #3

   Neue Updates aufgenommen

2. 2024-11-25 #2

   Neue Updates von Red Hat aufgenommen

3. 2024-11-24 #1

   Initiale Fassung

References

• RedHat Security Advisory vom 2024-11-24
  https://access.redhat.com/errata/RHSA-2024:9884
• Red Hat Security Advisory RHSA-2024:9885 vom 2024-11-26
  https://access.redhat.com/errata/RHSA-2024:9885
• Atlassian Security Bulletin - November 18 2025
  https://confluence.atlassian.com/security/security-bulletin-november-18-2025-1671463469.html